CVE-2002-2234: Medium severity Netscreen ScreenOS vulnerability
Published Dec 31, 2002
·Updated
NetScreen ScreenOS before 4.0.1 allows remote attackers to bypass the Malicious-URL blocking feature by splitting the URL into fragmented IP requests.
Affected Software
5 affected components
Netscreen ScreenOS=3.0
Netscreen ScreenOS=3.1
Netscreen ScreenOS=2.8
Netscreen ScreenOS=2.7.1
Netscreen ScreenOS=4.0
Remediation
Patch Available
Event History
Dec 31, 2002
CVE Published
05:00 AM
Data Sourced
via NVD·05:00 AM
RemedyDescriptionSeverityWeaknessAffected Software
Oct 14, 2007
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-2234?
CVE-2002-2234 is considered a medium severity vulnerability as it allows remote attackers to bypass security features.
2
How do I fix CVE-2002-2234?
To fix CVE-2002-2234, upgrade to NetScreen ScreenOS version 4.0.1 or later.
3
What systems are affected by CVE-2002-2234?
CVE-2002-2234 affects NetScreen ScreenOS versions 2.7.1, 2.8, 3.0, 3.1, and 4.0.
4
Can CVE-2002-2234 be exploited remotely?
Yes, CVE-2002-2234 can be exploited remotely due to its design flaw in URL fragmentation.
5
What is the impact of CVE-2002-2234?
The impact of CVE-2002-2234 is that attackers can effectively bypass malicious URL blocking, leading to potential security breaches.